Known vulnerabilities in Erlang OTP - page 3

Vendor: erlang
Software: Erlang OTP
Software CPE: cpe:2.3:a:erlang:otp:*:*:*:*:*:*:*:*
Total vulnerabilities: 72
Public exploits: 3
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Erlang OTP Erlang OTP is affected by 72 known vulnerabilities: 1 critical, 12 high, 41 medium, 18 low Critical High Medium Low

Vulnerabilities (72)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126652 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-32147
CWE-22 Low
No
No
26.2.5.20, 27.3.4.11, 28.4.3 21.04.2026 SB2026042143
SB2026051961
SB2026070964
and 5 more
#VU125778 - Improper Certificate Validation
CVE-2026-32144
CWE-295 High
No
No
27.3.4.10, 28.4.2 10.04.2026 SB2026041031
SB20260902104
#VU125777 - Incorrect Authorization
CVE-2026-28808
CWE-863 High
No
No
26.2.5.19, 27.3.4.10, 28.4.2 10.04.2026 SB2026041031
SB2026041046
SB2026041047
and 6 more
#VU125776 - Generation of Predictable Numbers or Identifiers
CVE-2026-28810
CWE-340 Low
No
No
26.2.5.19, 27.3.4.10, 28.4.2 10.04.2026 SB2026041031
SB2026041046
SB2026041047
and 4 more
#VU125775 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-23941
CWE-444 High
No
No
26.2.5.18, 27.3.4.9, 28.4.1 10.04.2026 SB2026041022
SB2026041027
SB2026041028
and 7 more
#VU125774 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-23942
CWE-22 Low
No
No
26.2.5.18, 27.3.4.9, 28.4.1 10.04.2026 SB2026041022
SB2026041027
SB2026041028
and 6 more
#VU125773 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-23943
CWE-409 Medium
No
No
26.2.5.18, 27.3.4.9, 28.4.1 10.04.2026 SB2026041022
SB2026041027
SB2026041028
and 5 more
#VU125772 - Relative Path Traversal
CVE-2026-21620
CWE-23 Low
No
No
26.2.5.17, 27.3.4.8, 28.3.2 10.04.2026 SB2026041021
SB2026041023
SB2026041024
and 6 more
#VU125771 - Untrusted Search Path
CVE-2021-29221
CWE-426 Medium
No
No
23.2.3 10.04.2026 SB2026041020
#VU125770 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-25623
CWE-22 Medium
No
No
22.3.4.6, 23.1 10.04.2026 SB2026041019
#VU125769 - Improper Authentication
CVE-2020-35733
CWE-287 Medium
No
No
23.2.2 10.04.2026 SB2026041018
SB2021012150
SB20210120137
#VU125768 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2016-1000107
CWE-601 Medium
No
No
26.2.5.15, 27.3.4.3, 28.1 10.04.2026 SB2025102052
#VU117393 - Resource exhaustion
CVE-2025-48041
CWE-400 Medium
No
No
26.2.5.15, 27.3.4.3, 28.0.3 20.10.2025 SB2025102052
SB2025102180
SB2025102745
and 5 more
#VU117392 - Uncontrolled Recursion
CVE-2025-48040
CWE-674 Medium
No
No
26.2.5.15, 27.3.4.3, 28.0.3 20.10.2025 SB2025102052
SB2025102180
SB20260105126
and 5 more
#VU117391 - Resource exhaustion
CVE-2025-48039
CWE-400 Medium
No
No
26.2.5.15, 27.3.4.3, 28.0.3 20.10.2025 SB2025102052
SB2025102180
SB20260105126
and 7 more
#VU117390 - Resource exhaustion
CVE-2025-48038
CWE-400 Medium
No
No
26.2.5.15, 27.3.4.3, 28.0.3 20.10.2025 SB2025102052
SB2025102054
SB2025102055
and 6 more
#VU116129 - Out-of-bounds read
CVE-2025-58050
CWE-125 Medium
No
No
28.0.3 26.09.2025 SB2025092615
SB2025092617
SB2025101331
and 3 more
#VU111243 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-4748
CWE-22 High
No
No
26.2.5.13, 27.3.4.1, 28.0.1 17.06.2025 SB2025061756
SB2025061922
SB20250711173
and 3 more
#VU11845 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2017-1000385
CWE-300 Low
Available
Exploited
18.3.4.7, 19.3.6.4, 20.1.7 16.04.2018 SB2017120816
SB2018041212
SB2018031524
and 6 more
#VU40408 - Exposure of sensitive information to an unauthorized actor
CVE-2015-2774
CWE-200 Medium
No
No
17.5 08.04.2016 SB2015080604
SB2015080605
SB2015080705
and 2 more


Showing elements 41 - 60 out of 72